SAP Solution Manager can be accessed through the SAP GUI and through a SAP Web Application Server (SAP NetWeaver). Applications like this should be protected especially when it is accessed from the outside world, a name and password combination will simply not do. This is when Access Manager comes into place.
SAP systems will mostly be hidden somewhere deep within a company's infrastructure, it will not be in the DMZ. In this case the SAP systems we even hosted at SAPHosting – Waldorf Germany. So no way we can reach it from the outside world. Again a good opportunity for Access Manager.
The problem with enabling SAP Web Application Server (and especially Solution Manager) is that all communication is tightly checked. If security domains are wrong, if you are using a wrong DNS name to do the requests or if you are using an ip-address, the scripts will simply give you an access denied.
This problem can partially be solved by the naming the SAP server with the same (DNS) name as it will have when available on the outside world. (Somewhat like the published DNS name in sharepoint). However in most cases this is not possible, and it is not a solution for all the security checking.
The pages within Solution Manager have frames which are filled from different java scripts. If the security domain from one script is different than the frame expects, a access denied will be issued. Some of this checking is done with document.domain settings within the java scripts. We will not go into why and how in this article.
The following procedure is a way to enable SAP Solution Manager through Access Manager. The actual SAP system is at SAPHosting and DNS names are different on the host and on the outside world.
Step 1 : Enable different domain on the SAP side.
First step is to let the SAP-WAS know that requests will be issued using a different DNS name and make sure it is allowed. As mentioned, in Sharepoint this is done via the published DNS name. SAP, however, has the possibility to advertise multiple domains for one, more or all SAP applications and specify different ports per application.
In order to do this you will need to change the table HTTPURLLOC. Make sure you provide the wanted name in the HOST field.